Trellix Email Security vs. Trellix Network Security

It has a very good feature of URL replace, it helps us to block or prevent spam, phishing, or malicious emails. It has some limitations like if some large or lengthy emails come it takes more time to scan and to avoid delay it forwards the mail to the recipient with a warning note on it.

It’s a dedicated Network Advanced Threat Detection and
Prevention solution. Easy maintenance and low operating costs fit perfectly for
SMEs. Variety of appliance selection makes NX the perfect choice for large
enterprises. As it’s a dedicated solution with its own appliance, price is higher
compared to NGTP add on solutions. FireEye is an ecosystem therefore when you’ve
the EX or HX vice versa, you should be looking to NX. Otherwise, you’re missing
the threat intel exchange on the network side reverse is the true. Sizing is
important before the purchase, if you select a low end model for a busy network
you lose your initial investment. For multiple NX deployments I highly
recommend CMS. Without CMS you’ll lose the threat intel exchange and this will
negatively reduce the risk scores.

Incentivized

• Very user-friendly and simple interface.
• Policy rules are easy to create and they work.
• Very little downtime or operational impact.
• Email delivery issues are easy to investigate and troubleshoot.

Incentivized

• Advanced detection of targeted attacks.
• Mandiant team effort is a big plus.
• Inline mitigation capabilities particularly well.
• Different deployment models for specific needs.
• License and information sharing selection 1 way or 2 way mode.
• Frequent updates.
• Low false positive rates.
• FireEye sandboxing is immune to sandboxing attacks.
• Central management (CMS) capabilities for managing several NX's.
• Extra IPS/IDS functionality in the product.
• Smartvision specific to lateral movement detection.
• Upgrades and updates with zero down time.
• Local FireEye support is superb.
• Multiple deployment scenarios (span, inline) in the same NX for different interface pairs.
• SSL inspection support.
• No need to maintain, build or updates the images. It's highly automatic.

Incentivized

• Sometimes feels that console running slow.
• Riskware detection has a lot of false positive.
• The user interface is not very intuitive.

Incentivized

• Very first detected APT sample can pass the NX even it's inline blocking mode.
• Performance optimization for busy networks is cumbersome.
• CMS does not provide all the management capabilities, CLI or local config. Should be done for advanced customization.
• Constant limitations of tcpdump/ packet capture for 10G interfaces.
• IPS functionality is a bit cumbersome, not a full feature IPS, lack of signatures and customization of IPS signatures.
• It's not a full NDR solution or a UBA solution.
• Lack of device or user mapping.
• Forensics is based on the specific APT. May not provide the whole story and need some additional tools.
• You cannot make manual submission to NX (needs AX).
• You cannot access the kernel directly for deep analy[sis] or troubleshooting (assist from FireEye Support should be taken).

Incentivized

FireEye Email Security is the most effective email security solution for protecting enterprises from APT. It is not complicated to set up and you can ride a wave of continuous security effects for a long time without major changes after the initial setup. It's automated, so users don't have to care too much about it. In addition, it provides detailed analysis data, so you can utilize it for 3rd party solutions if you want.

Incentivized

The reason that I gave the support a 5 is that I have had both positive and negative experiences. One of the positive experiences was when a senior support engineer spend quite a few hours with me solving an issue that we were having. One of the negative ones was when we were experiencing an issue and one person from support gave one solution, and when the issue reoccurred we were told by another person that what was recommended to us the first time was incorrect. The issue was never fully solved.

Incentivized

It was called Barracuda Spam Filter when we evaluated and switched to FireEye ES (called FireEye ETP at the time). At the time we compared them ES was much better at security and also spam filtering. ES has continued to get even better since we first chose them. The user interface, support, sales/engineer provided service, the effectiveness of the product, and continued improvement/development have made them a great choice.

Incentivized

FireEye NX is a solid product. It gives you sustainable
security throughout the organization. NX detection engines are more capable
compared to others. Its catch rate is higher, FP rate is lower, [and] speed is
awesome. NX can work for highly regulated environments with 1 way solution.
Operation costs are much lower. Software quality is very good. It may have bugs, but these bugs do not compromise the security in general. SOC team loves the
FireEye NX for its pinpoint detection capabilities. Local and partner support
is exceptional.

Incentivized

• It can reduce the spam, malicious and phishing mails.
• It has advanced threat intelligence.
• It gives some false positives as well.
• It has great decision making intelligence.

• As [a] financial company on the digital markets, we need to be safeguard for 0days and targeted attacks. FireEye NX provides the best updated protection with its enhanced capabilities.
• Security score based on detection/prevention metrics [is] very high ensuring the highest level of security.
• APTs in our region successfully detected and mitigated by the NX.
• For the ROI, in a six month period FireEye is paying off its [investment].
• One negative thing, especially with increasing network bandwidths, [is that] you need to make [the] investment every two or three years.

Incentivized